For example, a watchdog timer may be used when running untrusted code in a sandbox, to limit the CPU time available to the code and thus prevent some types of denial-of-service attacks. Watchdog timers are also used to monitor and limit software execution time on a normally functioning computer. A watchdog timer is usually employed in cases like these. In robots and other automated machines, a fault in the control computer could cause equipment damage or injuries before a human could react, even if the computer is easily accessed. For example, remote embedded systems such as space probes are not physically accessible to human operators these could become permanently disabled if they were unable to autonomously recover from faults. In such systems, the computer cannot depend on a human to invoke a reboot if it hangs it must be self-reliant. Watchdog timers are commonly found in embedded systems and other computer-controlled equipment where humans cannot easily access the equipment or would be unable to react to faults in a timely manner. Watchdog timers are essential in remote, automated systems such as this Mars Exploration Rover In other computers the watchdog may reside in a nearby chip that connects directly to the CPU, or it may be located on an external expansion card in the computer's chassis.

Microcontrollers often include an integrated, on-chip watchdog.

The corrective actions typically include placing the computer and associated hardware in a safe state and invoking a computer reboot.

The timeout signal is used to initiate corrective actions.

If, due to a hardware fault or program error, the computer fails to restart the watchdog, the timer will elapse and generate a timeout signal. Watchdog timers are widely used in computers to facilitate automatic correction of temporary hardware faults, and to prevent errant or malevolent software from disrupting system operation.ĭuring normal operation, the computer regularly restarts the watchdog timer to prevent it from elapsing, or 'timing out'. One pin receives the timer restart ('kick' ) signal from the computer another pin outputs the timeout signal.Ī watchdog timer (sometimes called a computer operating properly or COP timer, or simply a watchdog) is an electronic or software timer that is used to detect and recover from computer malfunctions. A watchdog timer integrated circuit (Texas Instruments TPS3823).

Intel watchdog driver